Build & Deploy Scanner

The Build & Deploy scanner detects CI/CD systems, containerization, and infrastructure-as-code across your workspace. This intelligence supports DevOps assessments, platform migrations, and compliance audits.

Detection Categories

CI/CD Platforms

Containerization

Infrastructure as Code

Release & Versioning

Package Managers & Monorepo

Use Cases

Platform Migration Assessment

Before migrating CI/CD platforms:

vg scan --format json | jq '.buildDeploy.ci'

Identify:

• Number and complexity of workflows
• Platform-specific features used
• Secrets and variables required

Security Audit

Verify expected infrastructure patterns:

vg scan --format json | jq '.buildDeploy | {ci, iac, containers}'

Multi-Repo Analysis

Across multiple repositories, aggregate to find:

• Inconsistent CI/CD choices
• Missing containerization
• IaC adoption gaps

Example Output

{
  "buildDeploy": {
    "ci": {
      "platforms": ["github-actions"],
      "workflows": [
        {
          "file": ".github/workflows/ci.yml",
          "triggers": ["push", "pull_request"],
          "jobs": ["test", "build", "deploy"]
        },
        {
          "file": ".github/workflows/release.yml",
          "triggers": ["release"],
          "jobs": ["publish"]
        }
      ]
    },
    "containers": {
      "docker": true,
      "dockerCompose": true,
      "kubernetes": false,
      "helm": false,
      "dockerfiles": [
        { "path": "Dockerfile", "baseImage": "node:20-alpine" },
        { "path": "Dockerfile.dev", "baseImage": "node:20" }
      ]
    },
    "iac": {
      "terraform": true,
      "bicep": false,
      "cloudformation": false,
      "files": ["infra/main.tf", "infra/variables.tf"]
    },
    "release": {
      "tool": "changesets",
      "configFile": ".changeset/config.json"
    },
    "monorepo": {
      "tool": "turborepo",
      "workspaces": ["apps/*", "packages/*"]
    },
    "packageManager": {
      "name": "pnpm",
      "version": "8.14.0"
    }
  }
}